IA.L2-3.5.3 Multifactor Authentication

CMMC Practice IA.L2-3.5.3 – Multifactor Authentication: Use multifactor authentication for local and network access to privileged accounts and for network access to non-privileged accounts. Links to Publicly Available Resources BrightTALK – Risks Posed By...

IA.L2-3.5.11 Obscure Feedback

CMMC Practice IA.L2-3.5.11 – Obscure Feedback: Obscure feedback of authentication information. Links to Publicly Available Resources CMMC Level 2 Assessment Guide This document provides assessment guidance for conducting Cybersecurity Maturity Model...

IA.L2-3.5.10 Cryptographically-Protected Passwords

CMMC Practice IA.L2-3.5.10 – Cryptographically-Protected Passwords: Store and transmit only cryptographically-protected passwords. Links to Publicly Available Resources CMMC Level 2 Assessment Guide This document provides assessment guidance for conducting...

IA.L2-3.5.9 Temporary Passwords

CMMC Practice IA.L2-3.5.9 – Temporary Passwords: Allow temporary password use for system logons with an immediate change to a permanent password. Links to Publicly Available Resources CIRT.net – Default Password Database Consolidation of default passwords for...

IA.L2-3.5.8 Password Reuse

CMMC Practice IA.L2-3.5.8 – Password Reuse: Prohibit password reuse for a specified number of generations. Links to Publicly Available Resources CIRT.net – Default Password Database Consolidation of default passwords for commercial software and hardware...

IA.L2-3.5.7 Password Complexity

CMMC Practice IA.L2-3.5.7 – Password Complexity: Enforce a minimum password complexity and change of characters when new passwords are created. Links to Publicly Available Resources CIRT.net – Default Password Database Consolidation of default passwords for...